Web Hosting Talk







View Full Version : Trojans?!!


GXD
03-21-2004, 07:46 AM
My server wont let me send mail or access MySQL. After numberous restarts and editing config files etc it still did not work, so i scanned for trojans but am unsure if these are actually torjans?

Possible Trojan - /usr/bin/podchecker

Possible Trojan - /usr/bin/pstruct

Possible Trojan - /usr/bin/splain

Possible Trojan - /usr/bin/xsubpp

Sasuke
03-21-2004, 07:54 AM
I may be wrong, but I don't think those are trojans. Aren't some of those converters?

GXD
03-21-2004, 08:05 AM
ok thanks, any idea on how to get mysql and exim working again? it just times out

TotalHostero
03-21-2004, 08:10 AM
Try install chkrootkit. Cpanel gives false positives with trojans.

GXD
03-21-2004, 08:12 AM
i got it installed, how do i run it?

akashik
03-21-2004, 08:22 AM
Originally posted by TotalHostero
Cpanel gives false positives with trojans.

Agreed, the Trogan Scanner's not worth a pinch of sh*t - you can safely ignore the results of it.

michaelfoo
03-21-2004, 08:39 AM
i got it installed, how do i run it?


Go to the directory where you installed Chkrootkit and key in:
./chkrootkit

It will generate the result for you.

coight
03-21-2004, 08:41 AM
Also check /var/log/messages ;)

GXD
03-21-2004, 10:47 AM
ok i have a problem..


Checking `bindshell'... INFECTED (PORTS: 465)

how do i go about fixing it?